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(57) Abstract 

Method and apparatus for 
determining a data path between 
source (11) and destination (12) 
IP devices. A TTL mecha- 
nism is used, in combination 
with loose-source routing, to in- 
crementally discover die routers 
on the path, wherein the query- 
ing node (13) sending the UDP 
probe packets need not be the 
source node. Once an inter- 
mediate router on the path is 
known which can communicate 
via SNMP, an SNMP query may 
be sent to determine the next* 




hop router from the IP routing table. If this fails, the method reverts to the incrementing TTL mechanism. 
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IffiT HpP AND AP PARATUS PT>R DE TEBMIN ING 
TP rOMK THTrATTOMS PATH 

FiPld of l-ho Invention 

This invention relates to computer network 
communication systems, and in particular to a method and 
apparatus for determining data paths on an IP network. 

Rarlr ? ronn H of the Tnvgntion 

In an Internet, several networks are connected 
together through the use of gateways and an internetworking 
protocol. The gateways (often called routers), using the 
protocol, hide the underlying details of the actual networks, in 
order to provide uniform service across the network. 

The leading internetworking technology is the Internet 
suite of protocols, commonly referred to as TCP/IP, after the 
two-core protocols in the suite. TCP, the transmission control 
protocol, is a connection-oriented transport service. IP, the 
Internet protocol, is a connectionless-mode network service. 

IP is called a connectionless-mode network protocol, 
which means that it is datagram-oriented. When some entity on 
the network wishes to send data using IP, it sends that data as 
a series of datagrams. Associated with each datagram is an 
address indicating where the datagram should be delivered. This 
address consists of an IP address, an upper-layer protocol 
number. IP takes the user-data and encapsulates it in an IP 
datagram, which contains all of the information necessary to 
deliver the datagram to the IP entity at the destination. The 
remote IP entity will examine the IP datagram it receives, and 
then strip off the data and pass it up to the appropriate 
upper-layer protocol. See, M. Rose, "The Simple Book - An 
Introduction To Management Of TCP/IP-Based Internets," Prentice 
Hall, 1991. 

SNMP, Simple Network Management Protocol, has become 
the de facto operational standard for network management of 
TCP/IP-based internets. A managed network may be considered as 
consisting of three components: (1) several managed nodes, each 
containing an agent; (2) at least one network management station 
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(NMS); and (3, a network management protocol, „ hich i5 used by 
the statron and the agents to exchange management information. 
The managed node may consist of a host system, e.g., 
workstation, terminai server, or printer; a gateway system, 
e.g., a router; or a media device, e.g., a bridge, hub or 
multrplexor. one activity of the network management system is 
to comprie a topology of the network, defining the connections 
between various devices on the network. The network management 
system may guery the IP routing table at each gateway, to 

Th s e 7nfo e TV- d6ViC " a " 10Cated " "* « «» '"-ay. 

Z two d " ^ '° C °" StrUCt 3 data P " h 

any two devices on the internet. 

Associated with IP is another protocol providing 
low-level feedback about how the internet layer is operating. 

(ICMP). icmp provides basic control ness 
reporting. 

One useful tool in troubleshooting connectivity 
problems at the internet layer is a program called 
The traceroute program sends a series of "probe packets" using 
UI.P to an IP address and awaits an icmp reply. „ ore 
specifically, „ datagrams carrying the UDP packets are sent 
with monotonically increasing values in the "time to live" ,TTL, 
field, and the UDP port chosen is one most likely not to be in 
use For each TTL value, the traceroute program sends a fixed 
number of packets (usually three, , and reports back the IP 
addresses of the devices responding. This process continues 
until an ICMP port unreachable packet is received or some TTL 
threshold as reached (usually 30) . 

t-K ™. " 3 gatSWay reCeiV6S an IP datagram and decrements 
the TTL to zero, then it returns an ICMP time exceeded packet. 
If the IP datagram eventually reaches the network device in 
question, an ICMP port unreachable packet will be returned 
Combining the information from all the replies, the traceroute 
Program can report on the whole route. See M. Rose, supra, at 
66-67. a copy of the traceroute progam is shown below 
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♦Copyright (c) 1988 Regents of the University of California. 

*A11 rights reserved. 
* 

♦Redistribution and use in source and binary forms are permitted 
5 *provided that the above copyright notice and this paragraph are 
♦duplicated in all such forms and that any documentation, 
♦advertising materials, and other materials related to such 
♦distribution and use acknowledge that the software was 
♦developed by the University of California, Berkeley. The name 

10 *of the University may not be used to endorse or promote 
♦products derived from this software without specific prior 
♦written permission. „„„ „ 

♦THIS SOFTWARE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR 
♦IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED 

15 ♦WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 
♦PURPOSE. 
♦/ 

[7m — More — [m 
[;H[2J 



20 



25 



30 



#include <stdio.h> 
#include <errno.h> 
#include <strings.h> 
flinclude <sys/time.h> 

#include <sys/param.h> 
#include <sys/socket.h> 
#include <sys/file.h> 
^include <sys/ioctl.h> 



# include <netinet/in_systm.h> 
^include <netinet/in.h> 
#include <netinet/ip.h> 
#include <netinet/ip_var.h> 
35 #include <netinet/ip_icmp.h> 
#include <netinet/udp.h> 
# include <netdb.h> 
# include <ctype.h> 

40 #define MAXPACKET 65535 /* max ip packet size ♦/ 
#ifndef MAXHOSTNAMELEN 
fldefine MAXHOSTNAMELEN 64 
[7m — More — [m 
[;H[2J 
45 #endif 

ttifndef FD_SET 

#define NFDBITS (8*sizeof ( fd_set) ) 

fldefine FD SETSIZE NFDBITS i/nmBT)ie1 . . 

50 #define FD — SET (n, p) ( (p) ->fds_bits [ (n) /NFDBITS] 1= (1 « ( (n) 

% NFDBITS))) 

#define FD CLR(n, p) ( (p) ->fds_bits [ (n) /NFDBITS] &= Ml « 

( (n) % NFDBITS) ) ) 
#define FD ISSET(n, p) ( (p) ->fds_bits [ (n) NFDBITS] &(1 « ( (n) I 
55 ~ NFDBITS) ) ) 
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X5 



20 



25 



#define FD ZERO(p) bzpm drh^ *w > 

#endif ~ P ozero((char *)(p), sizeof (* (p) ) ) 

Jdefine Fprintf (void) fprintf 
"define Sprintf (void) sprintf 
#define Printf (void) print f 

extern int errno; 

extern char *malloc(); 

io extern char *inet_ntoa ( ) ; 

extern u_long inet_addr ( ) / 

/* 

* format of a (udp) probe packet. 

1 7m — More — [m 
[;H[2J 

struct opacket { 

struct ip ip; 
struct udphdr udp; 

u'thll ttl; /I f!? Uenc ^ |} umber of thi * Packet V 

>; struct timeval tv; /* t'ime"^^^ ^ 

u_char packet [5121; /* . . 

struct opacket *outDacket. /* Hit ln 5° und <icmp) packet*/ 
char *inetname<); ° Utpacket ' 7 * last output (udp) packet*/ 

30 int s; 

/ receive (icmp) socket file 

int sndsock; ,* des oriptor*/ 

/* send (udp) socket file 

„ »™*ti™tz, ' 

r n TS«:?e C „ k ; ddr Wheret ° ; '* ?JV° try , t0 

/* How much data*/ 

char * source = 0; 
40 char *hostname; 

char hnamebuf [MAXHOSTNAMELEN] ; 

f7m — More — [m 

[;H[2J 
45 int nprobes = sp- 
irit max_ttl = 30; 
u_short ident; 

u.short port » 32768.666; ,. start udp dest port#for 
so packets*/ 

St' e^ e S ; '* SOCket °Ptions */ 

lnt Waittime - 5; /* time to wait for response 

55 int nflag; (in seconds) */ 

/ print addresses numerically*/ 
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char usage [] = 

"Usage: traceroute [-dnrv] [-w wait] [-m max_ttl] [-p portttj 
[-q nqueries] [-t tos] [-s src_addr] [-g gateway] host [data 
size]\n"; 

5 

main (argc, argv) 

char *argv[] ; 

struct sockaddr_in from; 
io char **av = argv; 

struct sockaddr_in *to - (struct sockaddr_in* ) &whereto; 

int on = 1; 

struct protoent *pe; 

int ttl, probe, i; 

15 

[7m — More — [m 
[;H[2J 

int seq = 0; 

int tos = 0; 
20 struct hostent *hp; 

int Isrr = 0; 

u long gw; 

u~char optlist [MAX_IPOPTLEN] , *oix; 

25 oix = optlist; 

bzero (optlist, sizeof (optlist) ) ; 

argc — , av++; 

while (argc && *av[0] -=»_•) { 
30 while (*++av[0]) 

switch (*av[01) { 
case f d f : 

options 1= SO_DEBUG; 
break; 



35 case f g f - 



40 { 



45 More — [m 
[;H[2J 
long) )-l) 



argc — , av++; 

if ((lsrr+1) >= ( (MAX_IPOPTLEN-IPOPT_ 
MINOFF) 

/sizeof (u_long) ) ) 

Fprintf (stderr, "No more than %/d 

gateways\n", 

( (MAX_IPOPTLEN_IPOPT_MINOFF) 

/sizeof (u_[7m — 



exit (1) ; 
} 

50 if (Isrr == 0) { 

*oix++ = IPOPT_LSRR; 
*oix++; /* Fill in total 

length later*/ 
*oix++ = IPOPT MINOFF; /* Pointer to LSRR addresses*/ 
55 " } 
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lsrr++; 

if (isdigit(*av[0]) ) { 
gw = inet_addr (*av) ; 
5 if (gw) { 

bcopy(&gw, oix, sizeof(u long)); 
) else { - * 

Fprintf (stderr, "Unknown host 
%s\n",av[0]); 
10 exit(l); 

} 

} else { 

hp=gethostbyname (av[OJ ) ; 
if (hp) { 

15 *>copy(hp->h_addr, oix, 

sizeof (u_long) ) ; 

[7m— More— [m > else { 

I/H[2J 

20 Fprintf (stderr, "Unknown host 

%s\n",av[0]); 
exit (1) ; 
) 
) 

25 oix += sizeof (u_long) ; 

goto nextarg; 
case 'm' : 

argc — , av++; 
max_ttl = atoi(av[0]); 
30 if <max_ttl <= l) { 

Fprintf (stderr, "max ttl 
exit(l); ^ be >nn " ); 

) 

35 goto nextarg; 

case 'n': 

nflag++; 
break; 
case 'p • : 

40 ar 5 c — ' av++; 

port = atoi (av[0] ) ; 
if (port < 1) ( 

Fprintf (stderr, "port 
must be >0\n") ; 
[7m-More-[m exit(l); 
[;H[2J 

} 

goto nextarg; 
case 1 q' : 

argc--, av++; 
nprobes = atoi(av[OJ); 
if (nprobes < 1) { 

Fprintf (stderr, "nprobes 
55 exit(l); must be >o\n", ; 



45 



50 
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I 

goto nextarg; 
case f r': 

options 1= SO_DONTROUTE; 
5 break; 

case ' s 1 : 

/* 

* set the ip source address of 
the outbound 

io * probe (e.g./ on a multi-homed 

host) . 

*/ 

argc — , av++; 
source - av[0] ; 
15 goto nextarg; 

case ' t 1 : 

argc — , av++; 

[7m — More — [m 
t;H[2J 

20 tos = atoi (av[0] ) ; 

if (tos < 0 1 tos > 255) { 

Fprintf (stderr, "tos 
must be 0 to 255\n") ; 

exit(l) ; 

25 } 

goto nextarg; 
case 'v 1 : 

verbose++; 
break; 

30 case f w' : 

argc — , av++; 

waittime = atoi(av[0]); 

if (waittime <= 1) { 

Fprintf (stderr, "wait 
35 must be > 1 sec\n" ); 

exit (1) ; 

} 

goto nextarg; 

nextarg: 
40 argc — , av++; 

) 

[7m — More — [m 
[;H[2J 

if (argc < 1) { 
45 Printf (usage) ; 

exit (1) ; 

} 

setlinebuf (stdout) ; 

50 (void) bzero((char *)&whereto, sizeof (struct sockaddr) ) ; 

to->sin_family = AF_INET; 

to->sin_addr . s_addr=inet__addr (av[0] ) ; 

if (to->sin_addr .s_addr != -1) { 

(void) strcpy (hnamebuf , av[0]); 
55 hostname = hnamebuf; 
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} else { 

hp = gethostbyname (av[01 ) ; 
if (hp) { 

to->sin_family = hp->h_addrtype; 
bcopy(hp->h_addr, (caddr t)&to->sin 
addr, hp- ~ - 

>h_length) ; 
hostname = hp->h_name; 
} else { 

Printf ("Is: unknown host %s\n", 
argvfO], av[0]); 
exit(l) ; 

> 

} 

[7m — More — [m 
[;H[2J 

if(argc >= 2) 

datalen = atoi(av(lJ); 
if (datalen < 0 I datalen >« MAXPACKET - sizeof 
(struct opacket) ) { 

Fprintf (stderr, "traceroute: packet size 
must be 0 <= s < %ld\n", 

MAXPACKET - sizeof (struct opacket)); 
exit(l); ' 

} 

datalen += sizeof (struct opacket); 
outpacket = (struct opacket 
*)malloc( (unsigned) datalen) ; 
if (! outpacket) { 

perror ("traceroute: malloc"); 
exit(l); 

} 

(void) bzero((char *)outpacket, datalen); 
outpacket->ip.ip_dst = to->sin addr; 
outpacket->ip.ip_tos = tos; 

ident = (getpidO & Oxffff I 0x8000; 

if ((pe = getprotobynamePicmp") ) == NULL) { 
e — fm fprintf (stderr, "icmp: unknown protocol\n") ; 

exit (10) ; 

if ( (s = socket (AF_INET, SOCK_RAW, pe->p proto) ) < 0 ( 
perror ("traceroute: icmp socket"); 

avi t- / c;» . 



[7m — More — [m 
[;H[2J 



) 



exit (5) ; 
) 

else 

( 

printf ("Opened recv side RAW socket, proto [ICMP1 
= %d\n", J 
^ pe->p_proto) ; 

if (options & SO_DEBUG) 
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(void) setsockopt (s, SOL_SOCKET, SO_DEBUG, 

(char *) &on, sizeof (on) ) ; 

if (options & SO_DONTROUTE) 

(void) setsockopt (s, SOL_SOCKET, 
SOJDONTROUTE, 

(char *) son, sizeof (on) ) ; 

if ((sndsock = socket (AF_INET, SOCK_RAW, IPPROTO_RAW) ) 
< 0) { 

perror ("traceroute: raw socket"); 
exit (5) ; 

[?lh= } 
else 
[7m — More — [m 
[;H[2J 

printf ("Opened send side RAW socket ,proto=IPPROTO_RAW 
\n"); 

} 

if (Isrr > 0) { 
lsrr++; 

opt 1 i s t [ I POPT_OLEN ] = I POPT_MINOFF- l+(lsrr*sizeof 
(u_long) ) ; 

printf ("optlist[IPOPT_OLEN] = %d\n", optlist [ IPOPT_OLEN] ) ; 

bcopy ( (caddr_t) &to->sin_addr, oix, 

sizeof (u_long) ) ; 

oix += sizeof (u_long) ; 

while ((oix - optlist) &3) oix++; /* Pad to an 

even 

boundry*/ 

hex_display (optlist, (optlist tIPOPT_OLEN] + 4)); 

if ( (pe = getprotobyname ("ip") ) — NULL) ( 

perror ("traceroute: unknown protocol ip\n"); 

exit (10) ; 

) 

if ( (setsockopt (sndsock, pe->p_proto, 

IP_0PTI0NS, optlist, oix-optlist) ) < 0) { 

[7m — More — (m 
f ;H l 2J 

perror ("traceroute: lsrr options"); 

exit (5) ; 

) 

else 

printf ("Set IP_OPTIONS (for loose routing), proto 
used=%d\n", 

pe->p_proto) ; 

} 

} 
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#ifdef SO_SNDBUF 

printf ("Using setsockopt SOL_SOCKET, SO_SNDBUF, \n") ; 

5 : (chir*) : &datalen SndSOCk/ S0L - S0CKET ' SO_SNDBUF, 

sizeof (datalen) ) < 0) { 

perror ("traceroute: SO SNDBUF") ; 
io , exit(6,; 

#endif SO_SNDBUF 
#ifdef IP_HDRINCL 



15 



20 



25 



35 



printf ("IP_HDRINCL defined \n"); 
[7m — More — [m 
[;H[2J 



if (setsockopt (sndsock, IPPROTO IP, IP HDRINCL, 
(char *)4on, ~ — ' 

sizeof (on) ) < 0) ( 

perror ("traceroute: IP HDRINCL") ; 
^ exit (6); 

#endif IP_HDRINCL 

if (options & S0_DEBUG) 
(void) setsockopt (sndsock, SOL_SOCKET, S0_DEBUG, 

... (char *)&on, sizeof (on) ) ; 

if (options & SO_DONTROUTE) 

30 (void) setsockopt (sndsock, SOL SOCKET, 

SO_DONTROUTE, ~ 

. . , < char *)&on, sizeof (on) ) ; 

if (source) { 



(void) bzero((char *)&from, sizeof (struct 
sockaddr) ) ; " 



from. sin_f ami ly = AF_INET; 
from.sin_addr.s_addr == inetaddr (source) ; 
if (from.sin_addr.s_addr == -1) { 

Printf ("traceroute: unknown host 
40 %s\n", source); 

exit(l); 

) 

outpacket->ip.ip_src = from. sin_addr; 

[7m — More — [m 
« [;H[2J 

#ifndef IP_HDRINCL 



50 



55 



(fWB)) n < ( 0) d {° ClC ' < struct sockaddr *)&from, sizeof 
perror ( " traceroute : bind : " ) / 
} exit (1); 

#endif IP_HDRINCL 
) 
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Fprintf (stderr, "traceroute to %s (%s)", hostname, 
inet_ntoa (to->sin_addr) ) ; 

if (source) 

Fprintf {stderr, " from %s w , source); 

Fprintf (stderr, %d hops max, %d byte packets\n", 
max_ttl, datalen) ; 
(void) f flush (stderr) ; 



for (ttl 



10 



15 



[7m — More — [m 
[;H[2J 



20 



25 



30 



35 



40 



#ifndef ARCHAIC 



45 



50 



#endif ARCHAIC 



[7m — More — [m 
[;H[2J 



55 



1; ttl <= max_ttl; ++ttl) { 
u_long lastaddr = 0; 
int got_there = 0; 
int unreachable = 0; 

Printf ("%2d n , ttl); 

for (probe = 0; probe < nprobes; ++probe) { 



int cc; 

struct timeval tv; 
struct ip *ip; 

(void) gettimeofday Utv, &tz) / 
sendjprobe (++seq, ttl) ; 
while (cc = wait_for_reply (s, 
&from) ) { 
if ((i = packet_ok (packet, cc, 
&from, seq) ) ) { 

int dt - deltaT(&tv); 
if ( f r om . s in_addr . s_ 
addr ! 

- lastaddr) { 
print (packet, 
cc, &from); 
lastaddr = 
from. sin_ 
addr . s_addr; 

Printf (" %d ms M , 
dt) ; 

switch (i - 1) { 
case ICMP_UNREACH_ 
PORT : 

ip = (struct 
ip *) packet; 
if (ip->ip_ttl 

<= 1) 
Printf (" !") ; 

++got_there; 
break; 



case ICMP_UNREACH_NET 
++unreachable ; 
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10 



15 



20 



25 [7m— More— [m 
[;H[2J 



30 



35 



Print f{" t N " ); 

break; 
case IO!P_UNREACH_HOST: 

++unreachable; 

Print f( w !H W ); 

break; 
case ICMP_UNREACH 
PROTOCOL: " 

++got there; 

Print f(" !P«); 

break; 
case ICMPJJNREACH 
NEEDFRAG: " 

♦♦unreachable; 

Printf( w !F"); 

break; 
case ICMP_UNREACH 
SRCFAIL: 

♦♦unreachable; 
Print f (" !S M ) ; 
break; 

} 

break; 



> 



} 



) 

if (cc ==0) 

Print f ("*") ; 
j (void) fflush(stdout); 

put char CXn 1 ) ; 

if (got_there 0 unreachable >= nprobes-1) 
exit(O); 



40 



45 



55 



wait_for_reply(sock, from) 
int sock; 

struct sockaddr_in *from; 



{ 



fd_set fds; 

struct timeval wait; 

int cc = 0; 

int fromlen = sizeof (*from); 



FD_ZERO(&fds) ; 
FD_SET (sock, &fds); 

SO [7m-More-im V - SeC = Waittime ' wait.tv^usec 
t;H[2J 



0; 



"iiiiS 6 ? dr ck+1# &fds/ (fd - set * )0/ (fd - set * >o ' 

cc— recvfromfs, (char *) packet, 
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sizeof (packet) , 0, 

(struct sockaddr *)from, 
&f romlen) ; 

return (cc) ; 

) 

sendjprobe (seq, ttl) 
{ 

struct opacket *op « outpacket; 
struct ip *ip = &op->ip; 
struct udphdr *up « &op->udp; 
int i; 

ip->ip_off = 0; 
ip->ip_p = IPPROTOJJDP; 
ip->ip_len = datalen; 
ip->ip_ttl = ttl; 

up->uh_sport = htons (ident) ; 
up->uh_dport « htons (port+seq) ; 

up->uh_ulen = htons ( (u_short) (datalen - sizeof (struct 

ip) ) ) ; 
[7m — More — [m 
[;H[2J 

up->uh_sum = 0; 

op->seq = seq; 
op->ttl = ttl; 

(void) gettimeofday (&op->tv, &tz) ; 

i = sendto(sndsock, (char *) outpacket, datalen, 0, 
&whereto, 

sizeof (struct sockaddr)); 
if (i < 0 I i != datalen) { 
if (i<0) 

perror ("sendto") ; 
Printf ("traceroute: wrote %s %d chars, ret=%d\n M , hostname, 

datalen, i); 
(void) f flush (stdout) ; 

} 

) 

deltaT(tp) 

struct timeval *tp; 

{ 

struct timeval tv; 

(void) gettimeofday (&tv, &tz) ; 
[7m — More — [m 
[;H[2J 

tvsub(&tv, tp) ; 

return (tv.tv_sec+ 1000 + (tv.tv_usec + 500)/1000); 
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/* 

^Convert an ICMP "type" field to a printable string. 

char* 
5 pr-type(t) 

u char t; 

{ 

static char *ttab[] = { 

"Echo Reply", "ICMP 1", "ICMP 2". .. np<! . 
io Unreachable", ' Dest 

^ource Quench", Redirect- "ICMP 6", . iaiP 7 . 

Exceeded", ICMP9 ' "ICMP 10" « Time 

» Re^St"r blemn/ " TimeStamp "' "Timestamp Reply", "info 

"Info Reply" 
}; 



20 



if(t > 16) 

return ( "OUT-OF-RANGE" ) ; 



return <ttab[t]) ; 
[7m — More — [m 
[;H[2J 
25 } 

packet_ok(buf, cc, from, seq) 
u_char *buf; 
int cc; 

30 struct sockaddr_in *from; 

int seq; 

) 

register struct icmp *icp; 
u_char type, code; 
35 int hlen; 

#ifndef ARCHAIC 

struct ip *ip; 

ip - (struct ip *) buf; 
40 hlen = ip->ip_hl « 2; 

if (cc < hlen + ICMP_MINLEN) { 
if (verbose) 

Printf ("packet too short (%d bytes) 
45 from %s\n", cc, 

inet ntoa (f rom->sin addr) ) 
^ return (0); " - 

cc -= hlen; 
[ 7m — More — [m 
50 [;H[2J 

icp = (struct icmp *) (buf + hlen); 

#else 

icp = (struct icmp *)buf; 
#endif ARCHAIC 

55 ty P e = icp->icmp_type; code = icp->icmp_code; 



WO 96/13108 



PCT/IB95/01027 



- 15 - 

if {(type == ICMPJTIMXCEED && code == ICMP_TIMXCEED_ 
INTRANS 0 
type == ICMP_UNREACH) { 
struct ip *hip; 
5 struct udphdr *up; 

hip = &icp->icmp_ip; 
hlen - hip->ip_hl « 2; 

up = (struct udphdr *)((u_char *)hip + hlen); 
10 if (hlen + 12 <= cc hip->ip_p — 

IPPROTOJJDP && 
up->uh_sport == htons(ident) && 
up->uh dport == htons (port+seq) ) 

return (type == ICMPJTIMXCEED? -1 : 
15 code+1) ; 

} 

#ifndef ARCHAIC 

if (verbose) { 

int i; 



20 



30 



u_long *lp = (u_long * ) &icp->icmp_ip; 



[7m — More — [m 
(;H[2J 



Printf ("\n%d bytes from %s to %s" , cc, 
25 inet_ntoa(from->sin_addr) , inet_ntoa 

(ip->ip_dst) ) ; 
Printf (": icmp type %d (%s) code %d\n", type, 
pr_type (type) , 
icp->icmp_code) ; 
for (i = 4; i < cc; i += sizeof (long) ) 

Printf ( w %2d: x%8.81x\n", i, *lp++) ; 



} 

#endif ARCHAIC 

return (0) ; 

35 } 

print (buf, cc, from) 
u_char *buf; 
int cc; 

40 struct sockaddr in *from; 



{ 



struct ip *ip; 
int hlen; 



45 ip - (struct ip *) buf; 

hlen ■ ip->ip_hl « 2; 
cc — hlen; 

[7m — More — [m 
50 [;H[2J 

if (nflag) ^ xx 

Printf ( w is", inet_ntoa(from->sin_addr) ) ; 

else J , 

Printf (" %s (%s)", inetname (f rom->sin_addr) , 
55 inet_ntoa (f rom->sin_addr) ) ; 
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if (verbose) 

M^f r , !? bytes to %s "< cc, inet ntoa 
(ip->ip_dst) ) ; - 

5 

#ifdef notyet 
/* 

* ^fve^slonr 116 Internet p "tocol family headers 
io */ 

in_cksum(addr, len) 
u__short *addr; 
int len; 
{ 



15 



20 



25 



30 



35 



register int nleft. = len; 
register u_short *w = addr; 
register u_short answer; 
register int sum = 0; 



(7m — More — [m 
I;H[2J 

/* 



Our algorithm is simple, using a 32 bit 
accumulator (sum), we add sequential 16 bit words 
to it, and at the end, fold back all the carry 
bits from the top 16 bits into the lower 16 bits 



) 



while (nleft > 1) { 
sum += *w++; 
nleft -= 2; 



/* mop up an odd byte, if necessary */ 
if (nleft == 1) * ' 



sum += * (u_char *)w; 

/* 

40 */ add baCk Carry OUts from to P 16 bi ts to low 16 bits 

sum = (sum » 16) + (sum & Oxf f f f ) ; /* add hi 16 to 

sum +- (sum » 16); a ° W 

answer = -sum; aaa ca f ry ' 

45 / truncate to 



} 



return (answer); 16 bitsV 



[7m — More — [m 
so [;H(2J 

#endif notyet 

/* 

♦Subtract 2 timeval structs: out=out - in 
55 * out is assumed to be >= in. 



WO 96/13108 



PCMB95/01027 



- 17 - 

*/ 

tvsub(out, in) 

register struct timeval *out, *in; 
{ 

5 if ( (out->tv_usec -= in->tv_usec) < 0) { 

out->t_sec — ; 
out->tv_usec += 1000000; 

} 

out->tv_sec -= in->tv_sec; 

10 } 
/* 

* Construct an Internet address representation. 

* If the nflag has been supplied, give 

is * numeric value, otherwise try for symbolic name. 
*/ 
char 

inetname (in) 
20 [7m — More — [m 
[;H[2J 

struct in_addr in; 

{ 

register char *cp; 
25 static char line[50]; 

struct hostent *hp; 

static char domain [MAXHOSTNAMELEN + 1]; 
static int first = 1; 

30 if (first && Inflag) { 

first - 0; 

if (gethostname (domain, MAXHOSTNAMELEN) 
==0 && 

(cp = index (domain, ! ! ) ) ) 
35 (void) strcpy (domain, cp + 1); 

else 

domain [0] - 0; 

} 

cp = 0; 

40 if (Inflag && in.s_addr!= INADDR_ANY) { 

hp = gethostbyaddr ( (char *)&in, sizeof (in), 

AF_INET) ; 
if (hp) { 

if ( (cp = index (hp->h_name, '.'))&& 
45 !strcmp(cp + 1, domain)) 

*cp = 0; 

[7m — More — [m 
[;H[2J 

cp = hp->h_name; 

50 

) 

} 

if (cp) 

(void) strcpy (line, cp) ; 
55 else { 
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UJ in.s_addr = ntohl(in.s addr); 

#defme C(x) ( (x) s Oxff) 

Sprintf (line, "%lu. %lu. %lu. %lu", 
C(in.s_addr » 24) , 

C(in.s_addr » 16), C(in.s addr » 8), 
^ C(in.s_addr) ) ; 

return (line); 

> 



hex_display (ptr, how_much) 
unsigned char * ptr; 
int how much; 
{ 

15 int i; 

for (i=0; i < how_iauch; i++) 

if((i % 8) == 0) 
20 [7m — More — (m 
[;H[2J 

{ 

printf ("\n"); 
) 

25 ^printf ("%4x", ptr[i]); 



printf ("\n"); 

) 



end traceroute.c 



Unfortunately, traceroute does not provide any 
information about which ports of the routers are on the path. 
35 In addition, not all devices on the network support IP options 
needed to implement traceroute. 

An SNMP query to a router is another method for 
tracing a route, i.e., by determining the next-hop router on the 
current router IP routing table. Unfortunately, not all routers 
40 can be accessed by SNMP. 

It would thus be desirable to provide a method of 
tracing a route from any source to any destination, regardless 
of whether one router is known, and regardless of whether each 
router on the path can be accessed using SNMP. 



Summary of thP Tn Wnr j rn 
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The present invention is a method and apparatus for 
determining a communications path between a source node and a 
destination node on a network using IP. The method includes 
compiling a path list of IP addresses for next-hop routers on 
5 the path between the source IP address and the destination IP 
address . 

In its broadest sense, the method includes the steps 
of: (a) sending a series of UDP probe packets out a socket of a 
first node to find successive next-hop routers on the path; 

10 (b) setting the socket of the first node to "loose route" the 
UDP probe packets through the source IP address; and 
(c) recording in the path list the next-hop router IP address 
returned following each one of the series of UDP probe packets. 
The UDP probe packets have a destination field set with the 

as destination IP address. The time to live (TTL) field of the UDP 
probe packet is set with an initial value of one, and 
monotonically increased (i.e., incremented by one) to find each 
successive next-hop router until the destination is reached. 

In a further embodiment, the method includes the step 

20 of alternatively sending an SNMP query to a router on the path 
in order to find the next-hop router on the path. Then, if the 
SNMP query fails, the method reverts to sending the next UDP 
probe packet. Thus, if a specific router on the path is 
discovered and can accept SNMP messages, we can then read its 

25 routing table to find out the next router on the way to the 
destination. The routing table also provides the port which 
leads to the next router. 

In a still further embodiment, if both the UDP probe 
packet and/or SNMP query fail to provide the next-hop router IP 

30 address, then an unknown next-hop router IP address is selected 
and recorded in the path list. We later use a topology 
information database from a network management system to resolve 

this unknown router. 

In a still further embodiment, the method includes 
35 sending a query to a topology information database to determine 
any unknown next-hop router IP addresses, as well as any 
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intra-router (i.e., layer-2 devices, such as hubs, bridges, 
etc.) on the path. 

In this manner, we can determine a complete route from 
a source node to a destination node. Apparatus for implementing 
the method is further provided, including a station with a 
memory and processor for storing and running the traceroute 
program and/or a network management station for maintaining a 
management database and sending SNMP queries to various routers 
on the network which are SNMP compatible. 

Brief DPserinl-inn th P EjgU£££ 

FIG. 1 is a schematic diagram of a portion of a 
network in which there is a source node, a destination node, and 
a querying node. 

FIG. 2 is a flowchart illustrating a mechanism by 
which the distance, in TTL units, is determined between the 
querying node and the source node. 

FIG. 3 is a flowchart illustrating a mechanism for 
locating the next-hop router along the path from the source node 
to the destination node using TTL. 

FIG. 4 is a flowchart illustrating the overall 
mechanism for locating the next router utilizing either an SNMP 
query or UDP probe packet. 

FIG. 5 is a block diagram of a general purpose 
computer, for implementing the various path determination 
methods of this invention. 

Detail pri DgscxiaLiflj 

FIG. 1 illustrates a general example, where there is a 
source node 11, a destination node 12, and a querying node 13. 
Additionally, there are routers rl and r2 between the querying 
node 13 and the source node 11, and routers r3, r4 and r5 
between the source node 11 and destination node 12. This 
representative network will be used to illustrate the method of 
the present invention. 

In a first incremental TTL mechanism, illustrated in 
FIG. 2, we set a socket in query node 13, used for sending the 
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UDP probe packets, to "loose route" all packets through the 
source node 11. In this manner, we determine the number of 
routers between the querying node 13 and the source node 11, 

i.e., rl and r2. 

Once we know one router on the path, i.e., by the 
above incremental TTL mechanism, we can send an SNMP query to 
read its routing table to find out the next router on the path 
for the destination, along with the port which takes us to the 
next router. If this fails, we revert to the incremental TTL 
mechanism to find the next-hop router. If both fail, we still 
continue, adding an unknown router to the path list. Our 
subsequent discovery of a network management system topology 
database, e.g., the Spectrum™ program sold by Cabletron Systems, 
Inc. of Rochester, New Hampshire, may enable us to determine all 
unknown router nodes as well as identify any intra-router 

devices on the path. 

More specifically, FIG. 2 illustrates the "how_far_is 
source (source, dest) " portion of our program. In step 21, we 
set the "loose-source routing" IP option on the socket through 
which we are sending the UDP packets out. The source is the 
loose route we specify to the socket. Thus, all packets going 
through this socket will be routed through this loose route, 
i.e., source. See D. Comer, "Internetworking With TCP/IP, Vol. 
I, Principles, Protocols, And Architecture, " Prentice Hall, 2nd 
25 ed., pp. 103-104 (1991). In step 22, we initialize by setting 
ttl = 1, and in step 23 we send a UDP probe packet to the 
destination where TTL = ttl. In step 24 we wait for the TTL 
EXCEEDED ICMP message. If this message is received from the 
source, then we return (ttl). If not, in step 25 we increment 
30 ttl by one and send another UDP probe packet. 

If we are unable to contact a router with an SNMP 
query, or if we choose to continue using the TTL mechanism, we 
then utilize the "find__next_ho P _using_ttl (source, dest, ttl)" 
portion of our program illustrated in FIG. 3. Again, in step 51 
35 we send a UDP probe packet to the destination with TTL = ttl and 
in step 52 we wait for one of the following ICMP responses: TTL 
EXCEEDED, or PORT_UNREACHABLE . If the message TTLJSXCEEDED is 



20 



WO 96/13108 



PCT/IB95/01027 



- 22 - 

reeled this message has come from one of the intermediate 
hosts „ d step 53 we ip address _ ^ 

message and record its IP address in our path list. If i„ step 

» s ep S sT nSe ^ reC6iVed W " hin 3 «- 

"," e lnCreTCnt the "'ry_count and send another ODP probe 
packet (return to sten 511 Tf n. „ Prooe 

maxim,™ r. • ^ • St6p 54) we have reached the 

maxxmum Perrod. x.e., MAX_RETRy, then we set the IP address to 

-unknown IP address .step 56, and enter the same in the p-ath 

If a PORT__UNREACHABLE message is received (step 57, 
en llmi 7 °" ly ^ """nation and therefor 'we 

::: L"; h ed. addrass ot the - - — «•* - - 

whi^ J 10 ' 4 UluStr "« orally a preferred method in 
router, and xf lt ls successful (step 32), we continue to 
search (step 31, on the next-hop router. If the snmp search is 

determrne the next-hop router, if this is successful (step 35, 
we agarn increment m (step 34, and then conduct an SNmP sear h 
on the next-hop router. If the UDP probe packet search is not 
successful, we add (step 36, an unknown router address t our 
P»h Ust and then increment TTL (step 34,. once we have 

2Tl tb r deStin " iCn ' " e =» «»» our management 

database u. e .. Spectrum", (step 37, to determine all the 
intra-router devices, i.e. layer-2 devices including hubs, 
brrdges, etc., between each pair of routers discovered 
previously. We can also use the management database to try to 
resolve the unknown router nodes in the path list. Essentially 
we use management database's knowledge of how the various lev ice 
models are connected to each other. Por example, Spectrum" 
scares this knowledge during an "autodiscovery" process of all 

pttfoT es on the network - The spectrum ™ net "°< k 

comm eS r ibed " U " S - Patent 5 ' 261 ' 0ii and " »d 
commonly owned U.S. serial No. 07/797,121 filed November 22, 
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1991 by R. Dev et al., which are hereby incorporated by 
reference in their entirety. Spectrum™ implements the 
Autodiscovery process described in copending and commonly owned 
U.S. Serial No. 08/115,232 filed September 1, 1993 by T. Orr et 
al., which is also incorporated by reference in its entirety. 
The present invention is not limited to use of the Spectrum™ 
database, but contemplates the use of any such topology database 
which defines the relative location of devices on the network. 

The program may be implemented in a general purpose 
computer 41 such as shown in FIG. 5. As can be seen, the 
general purpose computer includes a computer processing unit 
(CPU) 42, memory 43, a processing bus 44 by which the CPU can 
access the memory, and access to a network 45. 

The following code can be used to illustrate the 
method of this invention: 



discover_ip_path (source, dest) 



( 

//Variables used: 
II 

II source 
// dest 
// curr_ttl 



// path_list: 



user specified source IP address 
user specified destination IP address 
this will be used to find the next 
router when the TTL mechanism is 
used. 

list used for storing the discovered 
path 



sending-socket = open a RAW socket to send out 
the UDP probe packets. 

if (source is same as the station running this 

application) 

( 

curr_ttl = 0 



else 
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( 

Set the sending-socket to loose-route UDP probe 
packets through the source. This will be used in 
"how_far_is_source" and "trace_next_hop_using_ 
ttl" calls below. 

curr_ttl = how_far_is_source (source, dest) 

) 

curr_node = source 
path_list = empty list, 
while (curr_node != dest) 
( 

next_hop = NULL 

if (curr_node is a router and Spectrum has a SNMP 

model for it) 

( 

next_hop = trace_next_hop_using_snmp (dest. 
curr_node) 

) 

if (! next_hop) // SNMP method failed. Let's try 

TTL method. 

( 

next_hop = trace_next_hop_using_ttl (dest, curr 
ttl); 

) 

if (• next_hop) // Even the TTL method failed 
( 

path_list->add (unknown_router) ; 

) 

else 
( 

path_list->add (next_hop) 

) 

curr_ttl++ // increment curr_ttl 
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curr_node = next_hop 
) 

phase_2_discovery (path_list) ; 

) 

5 how_far_is_source (source, dest) 
( 

Use incremental TTL value program to find out how many hops 
away is the source from the station 
running this program. 
10 Note: that all UDP packets used herein originate from the 
station running this program and are destined for dest. 
The loose-routing option set above will force these packets 
to take following path: 
source >dest 

15 

application running this program 

) 

trace_next_hop_using_ttl (dest, curr_ttl) 
( 

20 Sending-socket is already set to loose-route the 

packets through source. 

send a UDP probe packet to dest with TTL value 
equal to (curr_ttl+l) and wait for the ICMP TTL_ 
EXPIRED message. 
25 This message will come from the next router we 

are looking for. 

) 

trace_next_hop_using_snmp (dest, curr_node) 
( 

30 This method uses SNMP queries to find out the next node in 

the path. IP routing table is read from the curr_node to 
find out the next hop for the given destination. 

If the dest address is a.b.d.c, we try to read the next 
35 hop values for the following addresses (in this order) 

until one succeeds: 
a .b . c . d 
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a.b.c. 0 
a.b.0.0 
a. 0.0,0 

If the next hop value is successfully found, we also return 
the corresponding port information (i.e. port of curr.node 
which connects to the next-hop) . 

The following is an example of an SNMP routing table: 

Destination Next-Hop Out_port 

134.141.1.0 via 134.141.150.251 Ethernetl 

134.141.7.0 via 134.141.150.251 Ethernetl 

134.141.6.0 via 134.141.150.251 Ethernetl 

134.141.159.0 via 134.141.155.254 SerialO 

134.141.153.0 directly connected EthernetO 

134.141.152.0 directly connected Ethernetl 

If a search of the IP routing table fails to find the 

next ho P/ it returns an invalid IP address. This 

causes the - disco ver_ip_path ()•' method to use the 

,, find_next_hop_using_TTL ()" method to find the next 
hop. 

Exampl f 

The following example illustrates a method of the 
25 xnvention in accordance with the representative network shown in 
FIG. 1. 

In this example, arrows show the path the UDP 
probe packets are going to take, 
querying: the node running this program 

30 source: g i ve n source IP address 

dest: given dest IP address 



is 



20 



35 



rl, r2: routers between querying node and source 

r3, r4, r5: routers between source and dest 

The socket used for sending the UDP probe packets from the 
querying node is set to loose-route all packets through source. 
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Also, all the UDP probe packets are sent to dest on an unused 
destination port number, so that if the probe reaches the dest, 
the dest will send us back a PORT_UNREACHABLE ICMP message. 

5 how_far_is_source (source, dest) 

For ttl-1. rl will send the TTL_EXCEEDED ICMP 
message, 

for ttl-2, r2 will send the TTL.EXCEEDED ICMP 
xo message 

for ttl-3 f source will send the TTL.EXCEEDED 

ICMP message 



and this method will return 3. 
15 subsequent discovery 

The subsequent discovery will depend on whether we have 
SNMP models for source, r3, r4 and r5 etc. in our 
Spectrum 1 " database, e.g., 

20 

r3 will be discovered by reading the routing table from 
the source or using the TTL mechanism with TTL=4 

r4 will be discovered by reading the routing table from 
25 r 3 or using the TTL mechanism with TTL=5 

Similarly r5 will be discovered by reading the routing 
table from r4 or using the TTL mechanism with TTL- 6 

Finally, we will know that dest is directly connected 
to r5, either by reading a direct routing entry for 
dest from r5, or using TTL mechanism (TTL=7) we will 
receive a PORT_UNREACHABLE ICMP message from the dest. 

35 Raving thus described a particular embodiment of 

the invention, various alterations, modifications and 
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improvements win readily occur to ^ 
Accordingly, the foregoing 

ul r iT 0 ^ S ^ ^ ° f eXamPle «" «* -tended to oe 

on™ inVenti ° n 13 liBUed " *»°- 'he 

following claims and the equivalents thereto. 
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CTAIMS 

1. A method for determining a path list of IP 
addresses for next-hop routers on a path between a source IP 
address and a destination IP address, the method comprising the 
steps of: 

sending a series of UDP probe packets out a socket 
of a querying node to find successive next-hop routers 
on the path, the UDP probe packets having a destination 
field set with the destination IP address and a TTL 
field set with an initial value of one and being 
monotonically incremented to find each successive 
next-hop router until the destination is reached; 

setting the socket of the querying node to loose 
route the UDP probe packets through the source IP 

15 address; and 

recording in the path list the next-hop router IP 
address returned following each one of the series of 
UDP probe packets. 



10 



20 



2. The method of claim 1, further including sending 
an SNMP query to a router on the path in order to find the 
next-hop router on the path, and if the SNMP query fails, 
reverting to sending the next UDP probe packet. 

25 3 . The method of claim 2, further including if the 

UDP probe packet fails to provide the next-hop router IP 
address, selecting an unknown next-hop router IP address to 
record in the path list. 

30 4 . The method of claim 3, further including sending a 

query to a topology information database to determine any 
unknown next-hop router IP addresses and any intra-router 
devices on the path. 



35 



5. A method for determining a communications path 
between a source and a destination on a network using IP, 
comprising the steps of: 
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a. determining a current router on the communications 
path; and 

b. determining a next router on the communications 
Path from the current router on the communications 
path, including the steps of: 

determining the next router via an 
SNMP query of the current router; 
b(ii) determining the next router by 

sending a UDP probe packet when an 
SNMP query fails to indicate the 
next router. 

6- The method of claim 5, further including the step 

c iterating step b. until the the next router is 
determined to be the destinatic 



ion. 
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25 



indudina^H T meth ° d 01 CUim 5 ' " herein ste <> •■ fu "»er 
including the steps of: 

Mi) setting a TTL value to 1; 
a(ii) sending a UDP probe packet with 

the TTL value to the source; 
a(iii) awaiting receipt of a TTL.EXCEEDED 
ICMP message from a current 
router; 

a(iv) determining the IP address of the 

current router; and 
a(v) incrementing TTL, and repeating 
3Q ste P s a(iii), and a (iv) 

until the TTL_EXCEEDED ICMP 

message is received from the 

source. 

» the steps 'o^ Meth ° d ° f Clai " 5 ' Uherei " StCP bli) 

b(i) (1) querying the current router for a 
routing table; and 
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b(i) (2) determining the next router from the 
routing table. 

9. The method of claim 5, wherein step b(ii) further 

5 includes the steps of: 

b(ii) (1) setting a TTL value to one plus the 
number of routers, including the 
source as a router, between a querying 
node and the current router; 

l0 b(ii) (2) sending a UDP probe packet with the 

TTL value to the destination through 
the source, with loose source routing 
specified; 

b(ii) (3) awaiting receipt of a TTL.EXCEEDED 
15 ICMP message; 

b(ii) (4) determining the IP address of the next 
router; and 

b(ii)(5) incrementing TTL, and repeating steps 
b(ii)(2)-(4) until the TTL.EXCEEDED 
20 ICMP message is received from the 

destination. 

10. The method of claim 5, wherein step b. includes 
the step of adding the next router to a path list. 

11. An apparatus for determining a communications path 
between a source and a destination on a network using IP, 
comprising: 

means for determining a router on the 
30 communications path; 

means for determining a next router on the 
communications path from a current router on the 
communications path; 

wherein the means for determining a next router 

35 includes: 

means for determining the next router via an 
SNMP query; and 
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means for determining the next router by 
sending a UDP prob e packet when an SNMP query 
fails to indicate the next router. 

12. The apparatus of claim 11, f urther including: 

means for iterating the means for determining a 
next ro U ter until the the next router is determined to 
be the destination. 

repress/ 3 ' eleCtr ° niC Stora * e containing data 

representing a computer program, wherein the electron" V 
media, when connected with a « , electronic storage 

comprises: PUrP ° S6 C °^ Uter ' 



15 „ meanS f ° r dete ™ining a current router on a 

is communications Dath fv„™ , 

8 Path from a sourc e to a destination; 

means for determining a next router on the 

;:r;::L°::r h fron a ™ c ~ - - ~- 

« SNMP ,uery; "™* *" th < «* router via an 

means £or d ete™ining the next router by 

riVro^r 6 packet uhen an s,mp — - — 

« the next r„,„ T* " erati "9 the 'or determinin, 

dest-natj: Untl1 " " * - the 
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err tup t?nrKET USED FOR SENDING THE UDP 

p S r E obe T packet^ U loose-route all packets 
through source. 
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SEND A UDP PROBE PACKET TO dest WITH 
StNU * w AND WAIT FOR THE 
TTL EXCEEDED ICMP MESSAGE. 




YES 

V 

RETURN (it I) 



FIG. 2 
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SEND A UDP PROBE PACKET TO d est WTTH 
TTL=ttl AND WAIT FOR ONE OF THE FOLLOWING 
ICMP RESPONSES: 
TTL EXCEEDED, OR PORT _UNR E ACH ABL E 
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PORT. 
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RETURN (IP_ADDRESS) 
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